Thwarting keyloggers using proxies
AssigneeRed Hat, Inc.
InventorJames P. Schneider
Life of this patent
Estimating the term…
Abstract
Techniques for thwarting keylogger using a proxy are described herein. According to one embodiment, in response to a request received from a client for accessing a Web page provided from a remote Web server over a network, a proxy server retrieves the Web page from the remote Web server and presents the Web page to the client. The proxy server further presents a virtual keyboard to the client to allow a user of the client to enter one or more keys in an input field of the Web page without having to type at the client for the purposes of logging into the Web site. Thereafter, the proxy server directs traffic between the client and the remote Web server over the network. Other methods and apparatuses are also described.
Claims18
A computer-implemented method, comprising:
- retrieving a Web page from a remote Web server and presenting the Web page to a client, in response to a request received at a proxy server from the client for accessing the Web page provided from the remote Web server;
- prior to retrieving the Web page, causing, by the proxy server, a virtual keyboard to be presented on the client to allow a user of the client to log into the proxy server without having to type at the client;
- after the user is logged into the proxy server, causing, by the proxy server, a list of accounts to be presented on the client to allow a user of the client to select one of the accounts on the list, wherein the proxy server receives the request from the client in response to the user's selection of the one account from the list;
- causing, by the proxy server, one or more keys in an input field of the Web page to be entered without the user having to type at the client;
- intercepting, by the proxy server, traffic between the client and the remote Web server over the network;
- and wherein the Web server does not offer an on-screen keyboard, and wherein the one or more keys can be entered in the input field of the Web page without the user having to type at the client when the Web server does not offer the on-screen keyboard.
A non-transitory computer-readable storage medium storing instructions which when executed by a machine, cause the machine to perform a method, the method comprising:
- retrieving a Web page from a remote Web server and presenting the Web page to a client, in response to a request received at a proxy server from the client for accessing the Web page provided from the remote Web server;
- prior to retrieving the Web page, causing, by the proxy server, a virtual keyboard to be presented on the client to allow a user of the client to log into the proxy server without having to type at the client;
- after the user is logged into the proxy server, causing, by the proxy server, a list of accounts to be presented on the client to allow a user of the client to select one of the accounts on the list, wherein the proxy server receives the request from the client in response to the user's selection of the one account from the list;
- causing, by the proxy server, one or more keys in an input field of the Web page to be entered without the user having to type at the client;
- intercepting, by the proxy server, traffic between the client and the remote Web server over the network;
- and wherein the Web server does not offer an on-screen keyboard, and wherein the one or more keys can be entered in the input field of the Web page without the user having to type at the client when the Web server does not offer the on-screen keyboard.
A proxy server, comprising:
- a processor;
- a memory coupled to the processor;
- a proxy module executed in the memory by the processor to retrieve a Web page from a remote Web server and to present the Web page to a client over a network, in response to a request received from the client for accessing the Web page provided from the remote Web server;
- an obscured input interface module to present, prior to retrieving the Web page, a virtual keyboard to the client to allow a user of the client to log into the proxy server without having to type at the client, wherein the proxy module is configured to intercept traffic between the client and the remote Web server over the network, and wherein the proxy module is configured to present a list of accounts on the client to allow a user of the client to select one of the accounts on the list after the user is logged into the proxy server, wherein the proxy module is configured to receive the request from the client in response to the user's selection of the one account from the list, wherein the proxy module is configured to enter one or more keys in an input field of the Web page without the user having to type at the client;
- and wherein the Web server does not offer an on-screen keyboard, and wherein the one or more keys can be entered in the input field of the Web page without the user having to type at the client when the Web server does not offer the on-screen keyboard.
Dependencies are inferred from the claim text.